Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B91840C9C6F11F193C86BE9CE1D38B0.roa
File:                     6B91840C9C6F11F193C86BE9CE1D38B0.roa (raw, json)
Hash identifier:          0Axq2Wx3YjhFOlHZXFMZOuE4tQ9si0PaHkgrxnbguRc=
Subject key identifier:   2C:95:5D:D4:F1:40:B8:53:D9:75:D3:41:1A:93:F1:6B:DE:2F:7E:A5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E04B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B91840C9C6F11F193C86BE9CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:16:19 +0000
ROA not before:           Thu 20 Aug 2026 08:16:15 +0000
ROA not after:            Thu 24 Sep 2026 08:16:15 +0000
asID:                     18013
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 21 Sep 2026 18:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122955 (0x1e04b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 08:16:15 2026 GMT
            Not After : Sep 24 08:16:15 2026 GMT
        Subject: CN=6a86b7d3-1742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:65:f0:e2:7a:a1:32:16:d4:b7:3a:00:c1:
                    0f:c0:52:dc:a9:27:2a:ba:3b:69:19:6b:f1:62:63:
                    ba:21:e3:7a:08:d1:f2:0e:30:c6:62:bd:be:f4:61:
                    5d:06:59:07:1b:04:9f:ea:61:3b:7c:4f:1c:e0:7e:
                    14:90:1c:46:20:3f:07:85:00:15:25:22:af:3d:94:
                    12:8e:0e:cf:67:c0:ca:a9:47:76:e6:58:c3:98:78:
                    77:d6:8f:a9:5a:8a:8e:e4:b4:ff:f9:f0:29:5d:f7:
                    be:3d:a8:4d:65:91:14:4b:4a:23:7d:1d:b6:72:3a:
                    15:ae:28:4c:7c:f7:b3:a1:c5:01:de:63:fb:19:f6:
                    68:ec:45:66:30:1e:cb:2d:ba:79:52:56:6d:55:3c:
                    6c:bf:e5:9d:ab:cd:d2:06:ef:0e:c9:f1:b0:2d:99:
                    b7:ce:9c:21:f7:2d:22:7f:87:9b:f5:3d:da:ac:5d:
                    25:18:cb:5f:12:32:80:d4:ad:ed:9f:9f:84:db:32:
                    66:d7:5a:75:09:aa:34:35:b1:29:b3:88:cc:36:de:
                    81:0c:d5:57:65:8c:45:62:11:2f:e3:8c:6c:b8:fd:
                    08:34:c9:05:95:10:46:8e:5f:73:29:75:d4:05:90:
                    f6:23:b5:0a:f6:f4:9f:57:e7:d3:29:1e:c0:a4:91:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:95:5D:D4:F1:40:B8:53:D9:75:D3:41:1A:93:F1:6B:DE:2F:7E:A5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B91840C9C6F11F193C86BE9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.191.255
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:5b:0f:49:2f:e5:31:08:59:a2:51:66:cf:85:23:4a:e2:d4:
         a3:ce:cc:d0:a4:63:57:11:a0:17:9b:76:e3:89:9f:61:40:2e:
         b5:c4:f7:d6:73:85:93:e8:fa:e1:43:b0:bf:2b:aa:64:94:d3:
         61:9c:26:36:4c:22:e4:7e:34:a7:87:bf:06:49:01:a9:a2:8e:
         a3:ba:2b:0e:8e:a0:25:00:02:62:fe:ee:c7:57:4b:e2:ce:0b:
         cc:91:4d:cd:87:af:1d:39:03:89:4f:36:49:b1:b6:8b:c7:c0:
         8a:38:5c:d7:d3:ba:76:24:c3:0f:8b:bf:9d:ce:a4:d0:5e:ec:
         a0:87:3d:c5:72:9e:16:7b:76:af:2b:a7:29:f6:52:5b:1b:51:
         ae:2d:dc:cf:ea:9a:ed:5a:b0:5e:4b:32:1c:c8:9f:38:67:15:
         23:e5:d8:59:8a:9e:80:9f:8d:f8:e6:ab:91:33:1d:1a:c8:66:
         f8:21:36:95:b0:cd:c3:d9:dc:87:5b:32:62:bf:f2:29:b0:20:
         29:3e:f6:2e:9a:0b:6f:b4:d0:b3:51:f9:a5:46:bc:29:44:19:
         a4:c2:2b:31:8e:47:b9:f1:00:58:d9:99:56:a4:76:5b:8b:8e:
         d0:70:18:e7:ee:81:62:91:de:ae:89:eb:d0:73:dd:14:65:d2:
         37:2d:a1:6f
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAeBLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIwMDgxNjE1WhcNMjYwOTI0MDgxNjE1WjAYMRYw
FAYDVQQDEw02YTg2YjdkMy0xNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsZxl8OJ6oTIW1Lc6AMEPwFLcqScqujtpGWvxYmO6IeN6CNHyDjDGYr2+
9GFdBlkHGwSf6mE7fE8c4H4UkBxGID8HhQAVJSKvPZQSjg7PZ8DKqUd25ljDmHh3
1o+pWoqO5LT/+fApXfe+PahNZZEUS0ojfR22cjoVrihMfPezocUB3mP7GfZo7EVm
MB7LLbp5UlZtVTxsv+Wdq83SBu8OyfGwLZm3zpwh9y0if4eb9T3arF0lGMtfEjKA
1K3tn5+E2zJm11p1Cao0NbEps4jMNt6BDNVXZYxFYhEv44xsuP0INMkFlRBGjl9z
KXXUBZD2I7UK9vSfV+fTKR7ApJFoBwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFCyV
XdTxQLhT2XXTQRqT8WveL36lMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QjkxODQwQzlDNkYxMUYxOTNDODZCRTlDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASaWZADBAaaWYADBACa
XxgwDQYJKoZIhvcNAQELBQADggEBAINbD0kv5TEIWaJRZs+FI0ri1KPOzNCkY1cR
oBebduOJn2FALrXE99ZzhZPo+uFDsL8rqmSU02GcJjZMIuR+NKeHvwZJAamijqO6
Kw6OoCUAAmL+7sdXS+LOC8yRTc2Hrx05A4lPNkmxtovHwIo4XNfTunYkww+Lv53O
pNBe7KCHPcVynhZ7dq8rpyn2UlsbUa4t3M/qmu1asF5LMhzInzhnFSPl2FmKnoCf
jfjmq5EzHRrIZvghNpWwzcPZ3IdbMmK/8imwICk+9i6aC2+00LNR+aVGvClEGaTC
KzGOR7nxAFjZmVakdluLjtBwGOfugWKR3q6J69Bz3RRl0jctoW8=
-----END CERTIFICATE-----